Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          8MOSBK3TkVBWfivc6rvsP4tX0Nv9VWMmACvxw2YQ6C8=
Subject key identifier:   41:99:BE:6B:24:18:B8:34:55:DE:75:28:60:63:86:8D:63:28:F1:52
Certificate issuer:       /CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
Certificate serial:       195FB1BB1C2A40573628A94E8FD0FD386D6D6419
Authority key identifier: 0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
Signing time:             Tue 23 Jul 2024 21:18:27 +0000
ROA not before:           Tue 23 Jul 2024 21:13:27 +0000
ROA not after:            Tue 22 Jul 2025 21:18:27 +0000
asID:                     267091
IP address blocks:        45.229.22.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:b1:bb:1c:2a:40:57:36:28:a9:4e:8f:d0:fd:38:6d:6d:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
        Validity
            Not Before: Jul 23 21:13:27 2024 GMT
            Not After : Jul 22 21:18:27 2025 GMT
        Subject: CN=4199BE6B2418B83455DE75286063868D6328F152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:db:83:89:18:64:93:b6:ca:e3:e2:ce:8a:
                    97:1f:6e:78:a8:7c:1d:19:8f:1f:a7:db:64:90:a7:
                    78:fa:5d:ae:46:08:f9:92:bf:69:94:9a:cd:59:10:
                    b8:98:4d:38:95:88:d6:10:48:bf:46:e1:7a:6b:3d:
                    2f:92:58:66:d1:a1:5e:b6:aa:9f:ce:b3:6b:50:13:
                    6e:f3:68:3d:6a:62:d2:e2:70:ff:a4:f7:e3:7b:d8:
                    7e:52:d0:7b:33:d2:86:ae:d9:c1:a0:e4:57:a8:ae:
                    96:68:0c:f3:22:54:e4:3a:98:9e:4b:93:0b:04:a9:
                    96:5f:c7:16:1f:db:60:d8:b2:03:38:3d:5c:ea:ff:
                    d8:a8:1a:3a:ed:12:4e:41:5b:8c:9a:1e:16:ed:2e:
                    cb:a8:35:6a:a1:6b:af:78:d4:51:e2:8f:bd:a0:6c:
                    6f:e7:96:1b:b3:d4:78:02:51:50:22:dc:1d:ed:d9:
                    3b:60:01:18:52:4b:42:eb:4b:f3:a6:03:0e:ed:bd:
                    af:70:e1:a5:f7:51:10:cc:d0:44:b7:94:79:74:99:
                    87:d4:4f:01:19:c9:e8:6a:d2:46:26:d2:cf:85:b8:
                    ab:40:db:63:ad:97:16:9a:f7:b7:03:dc:b1:7b:05:
                    23:b2:08:b5:0d:4c:c3:e4:d2:9f:2a:b1:eb:c0:ee:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:BE:6B:24:18:B8:34:55:DE:75:28:60:63:86:8D:63:28:F1:52
            X509v3 Authority Key Identifier:
                keyid:0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:5f:cd:ab:de:b4:d5:6d:b8:45:32:12:9b:ca:bd:91:06:
         f1:ce:1b:41:ad:43:9a:10:dd:c3:8d:d2:81:bc:2b:55:40:06:
         45:4d:ec:65:ab:20:45:37:6d:9e:ab:f3:74:11:26:63:59:55:
         43:e5:9b:eb:23:74:72:57:06:e2:4a:3b:d6:01:eb:f3:a9:a1:
         ec:12:f6:9a:f0:d7:39:08:24:83:b6:f7:5d:5f:9a:38:8e:94:
         c2:29:12:fe:5c:dd:04:b3:8e:84:b1:2b:50:19:45:be:08:9d:
         25:db:9e:dc:e7:52:bd:41:ae:66:cf:5a:26:d1:f9:5c:6e:ba:
         41:40:bf:de:27:af:b6:0f:7d:3b:b7:a5:e3:7c:eb:97:80:d8:
         5e:91:b7:8a:04:cb:eb:e7:a6:35:b2:9d:b7:a5:e3:60:c4:1d:
         da:3f:e5:f2:64:e1:07:1f:df:f6:2f:5c:45:97:26:36:c2:d2:
         15:7c:24:f3:bf:22:e0:95:60:39:9e:43:95:93:63:2b:e8:c3:
         ed:75:d6:98:9d:b3:82:42:2c:00:62:61:b2:96:5a:8a:3e:d5:
         3b:f0:c4:c0:22:e0:e1:e4:f9:71:75:d1:5d:c9:4a:e6:66:85:
         45:16:2a:40:de:08:7f:6a:80:f0:86:f0:d3:df:73:60:51:63:
         8e:2e:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:50 2024 by rpki-client on console-ams.rpki-client.org